PYPOT-PYTHON BASED MULTILAYERED HONEYPOT

Cyberattacks are becoming more advanced and frequent, making it essential to develop proactive defenses that go beyond traditional security systems. Honeypots play a key role in this space by attracting attackers and studying their behavior in a controlled environment. This project introduces Pypot, a lightweight, agent-less, and Python-based honeypot framework that simulates both SSH and web-based attack surfaces. Designed to be portable and easy to deploy, Pypot can run on any platform that supports Python. It integrates a fabricated Linux shell, a fake CMS-style admin login page, and a real-time dashboard to monitor intrusion attempts and generate alerts. A unique feature of Pypot is its ability to track the geolocation of attacking IP addresses and visualize them on an interactive world map, helping analysts understand global threat distribution. Unlike container-based systems like T-Pot, Pypot avoids dependency-heavy environments, offering a standalone solution with modular components. By combining deception, live logging, alerting, and geospatial analysis, Pypot serves as both an educational tool and a practical defense mechanism. Its flexible architecture allows for future extensions, such as FTP, MySQL, and malware trap modules. In an age where threats constantly evolve, Pypot provides an accessible and insightful way to study and defend against attacker behavior. Keywords: Honeypot, Python, SSH Emulation, Web Honeypot, IP Tracking, Threat Analysis, Geolocation Mapping, Intrusion Detection, Real-time Monitoring.